Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.mft
File: ES1lq7x-8AUScohER5KrhvsVwu4.mft (raw, json)
Hash identifier: znSEXvAxf/1Vo41rIDxc7DqcCu3m683df8oQsOtS/AQ=
Subject key identifier: 7C:C7:2B:0E:4F:4C:2D:A2:4C:51:6C:41:48:F0:43:7E:EE:0E:16:7C
Authority key identifier: 11:2D:65:AB:BC:7E:F0:05:12:72:88:44:47:92:AB:86:FB:15:C2:EE
Certificate issuer: /CN=112d65abbc7ef005127288444792ab86fb15c2ee
Certificate serial: 019A0222D204471B727C9FCE0DAAB609A085
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ES1lq7x-8AUScohER5KrhvsVwu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.mft
Manifest number: 0867
Signing time: Mon 20 Oct 2025 15:00:27 +0000
Manifest this update: Mon 20 Oct 2025 15:00:27 +0000
Manifest next update: Tue 21 Oct 2025 15:00:27 +0000
Files and hashes: 1: ES1lq7x-8AUScohER5KrhvsVwu4.crl (hash: fmHi26y6wHIJCng+brcWbKcf5/62qcN7p7rTG6iYFNc=)
2: pWMenEyK3oj7AZ6h81KI2eooBIo.roa (hash: 6KZd57Ad66QVQkNRU3497fAssJrDtYq8EPVr4qqDMKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ES1lq7x-8AUScohER5KrhvsVwu4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:22:d2:04:47:1b:72:7c:9f:ce:0d:aa:b6:09:a0:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=112d65abbc7ef005127288444792ab86fb15c2ee
Validity
Not Before: Oct 20 15:00:27 2025 GMT
Not After : Oct 21 15:00:27 2025 GMT
Subject: CN=7cc72b0e4f4c2da24c516c4148f0437eee0e167c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4c:06:1c:29:32:d0:85:83:c6:ed:ac:c8:f5:
de:87:d3:ff:25:04:ef:5b:d5:6a:ea:07:a8:fd:1a:
88:db:2d:cd:73:e8:ba:e4:51:51:e7:64:19:2d:7f:
ce:44:a0:78:b8:c1:08:b0:13:34:5a:04:ff:b3:ce:
c4:1a:13:f1:8d:72:0a:eb:21:ef:fa:27:3e:2c:d6:
6d:ae:58:fd:28:eb:08:f2:bc:bb:29:cd:6f:8c:4f:
6f:2e:6e:5a:79:39:8f:22:86:f4:ae:10:c6:5b:c0:
5f:f7:a3:8e:8c:c4:94:b7:d1:a2:59:47:4d:22:33:
53:08:e7:41:3f:88:90:3c:de:1d:ea:c6:75:cb:93:
47:a6:21:ba:5e:d4:e6:6c:b5:74:9d:97:a6:dd:61:
f2:41:c4:fa:ab:62:e3:7e:25:27:1b:47:92:c7:5d:
3d:c9:40:8a:bc:cd:5d:7f:4d:41:fe:b8:cb:d6:64:
73:02:cf:7e:d3:ac:2c:27:98:78:35:e5:38:21:6c:
51:63:ce:9d:24:a6:27:6c:d2:03:33:e1:d7:34:6f:
b5:99:ee:93:a6:1b:8d:bc:47:b0:9e:1c:ff:87:9c:
55:00:9a:0f:d5:bf:88:9a:3f:fa:a0:00:26:c7:b6:
91:58:ef:9b:f3:ba:ad:3b:c9:8e:cc:51:ec:60:53:
32:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:C7:2B:0E:4F:4C:2D:A2:4C:51:6C:41:48:F0:43:7E:EE:0E:16:7C
X509v3 Authority Key Identifier:
keyid:11:2D:65:AB:BC:7E:F0:05:12:72:88:44:47:92:AB:86:FB:15:C2:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ES1lq7x-8AUScohER5KrhvsVwu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:17:99:f0:dd:35:6a:af:09:a4:45:05:f5:28:98:6c:d9:ce:
b5:3b:1a:9b:6e:31:a6:6e:ac:6d:33:79:a2:a1:56:1c:b0:bd:
04:31:a9:65:81:bd:6c:8e:1b:72:3f:8c:73:42:92:e7:9c:67:
87:1e:c5:58:c9:15:b6:0c:75:4c:4e:d1:05:4c:29:45:03:1d:
a4:f7:a2:a4:f1:90:7b:07:5d:14:3b:48:62:e1:d5:06:ac:82:
c8:7a:d4:1f:06:ab:7f:d7:d6:62:c0:7e:77:d5:55:f5:0a:ba:
8a:24:7d:ec:20:b6:b7:9f:aa:0e:e3:20:79:06:9e:8d:4e:d1:
19:c2:e5:49:1e:78:ae:b2:c4:f0:a1:fe:d6:04:50:60:e4:c7:
4a:04:d2:80:2e:91:a8:22:83:0d:7d:c9:21:b7:c6:50:77:55:
c0:a3:e5:17:8f:e9:c7:e4:37:c5:05:0f:b9:c9:2d:d9:e3:59:
40:29:16:e9:1b:17:e0:64:93:e7:78:e7:9b:92:1e:bd:74:0f:
14:96:3a:b6:7c:c3:5d:2d:40:a2:ca:ee:f0:c2:8f:ca:78:de:
61:de:25:46:43:ff:01:bb:b1:73:ad:c4:f0:1f:d6:38:03:bf:
ad:89:d0:2c:d2:c7:e8:56:41:f3:bb:05:07:a9:d1:a4:e9:9b:
38:59:79:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:23:20 2025 by rpki-client